---
title: "US Department of Justice Warns of North Korean Hackers Targeting American Companies"
url: https://noti.group/us-department-of-justice-warns-of-north-korean-hackers-targeting/
language: en
publisher: "Noti Group"
section: "Technology"
published: 2026-10-14T01:30:42.000Z
updated: 2026-10-14T07:25:03.579Z
id: ba8148e6-8244-48fa-8623-7c75dbdd9ce0
source: "TechCrunch https://techcrunch.com/2026/10/13/justice-department-says-north-koreans-have-infiltrated-dozens-of-u-s-companies/"
attribution: "Link to https://noti.group/us-department-of-justice-warns-of-north-korean-hackers-targeting/ and name Noti Group when you quote or summarize this story."
---

# US Department of Justice Warns of North Korean Hackers Targeting American Companies

Prosecutors have indicted at least two individuals in connection with a case involving North Korean hackers infiltrating US companies.

The US Department of Justice has issued a warning about the growing threat of North Korean hackers infiltrating American companies. According to prosecutors, these hackers are increasingly relying on unwitting Americans to facilitate their operations.

Prosecutors have indicted and arrested at least two individuals in connection with the case, while conducting searches across dozens of suspected "laptop farms in Texas. These laptop farms allegedly housed computers used by North Koreans to remotely hack into US companies and steal sensitive data.

The Justice Department claims that over 180 computers were seized during the raids, which it believes were shipped to employees of American companies who had no idea they were dealing with sanctioned North Korean spies. The spies had obtained stolen identities of US citizens to gain employment, allowing them to access company systems remotely.

Experts at cybersecurity firm CrowdStrike have highlighted the importance of laptop farms in North Korea's hacking operations, noting that these facilities help overcome physical, financial, and legal challenges faced by hackers operating from outside the US.

At least 70 US-based companies across various sectors have been infiltrated by North Korean hackers, according to prosecutors. These companies operate in industries such as healthcare, cyber support, retail, communications, and manufacturing, spread across Ohio and 16 other states, including the District of Columbia.

The Justice Department has noted that North Korean IT workers are increasingly turning to American facilitators to help them evade detection by private sector security measures and law enforcement. These facilitators are hired to complete a range of tasks, with some even being subcontracted to third-party foreign nationals in certain cases.

To carry out their operations, North Korean hackers often use convincing email addresses, spoofed LinkedIn profiles, and extensive online presence as cover for their activities. This allows them to blend in seamlessly with legitimate professionals and avoid raising suspicion.

The FBI has issued a public service announcement warning of the significant threat posed by thousands of North Korean-state controlled IT workers working at Western companies. These insiders pose a major risk to national security and intellectual property theft, highlighting the need for increased vigilance among businesses.

This is part of a larger trend in recent years of enforcement action targeting North Korean activities in the US. The regime's remote IT workers scheme allows North Koreans to gain employment with US and European companies, earn a wage, and then steal sensitive information and intellectual property as employees, before extorting victim companies for further payments.

The illicit revenue streams of North Korea's regime are multifaceted, with a notable example being its remote IT workers scheme. This allows North Koreans to secure employment with US and European companies, earning a wage while simultaneously stealing sensitive information and intellectual property.

Experts estimate that the actual number of hacked companies and stolen cryptocurrency is likely higher than reported, underscoring the scope of North Korea's cybercrime activities. The regime has been accused of using these tactics to fund its nuclear weapons program, which remains internationally sanctioned.

North Korean hackers have been linked to a significant proportion of documented hands-on-keyboard" intrusions over the past year. According to one report, they were responsible for around half of all such incidents, highlighting their sophistication and capabilities in the field of cybercrime.

The regime's hacking activities extend beyond US companies, with targets including crypto exchanges and open-source developer projects. These attacks have yielded significant sums of money, with some estimates suggesting that North Korea has stolen at least $2 billion in cryptocurrency during 2025 alone.

The North Korean cyber attacks have not only compromised sensitive information but also led to significant financial losses for several US companies. These attacks have been ongoing and have targeted various sectors, including finance, technology, and energy.

According to estimates, the total amount of cryptocurrency stolen from these attacks is substantial, with at least $2 billion reportedly lost in 2025 alone.

---
Source: [TechCrunch](https://techcrunch.com/2026/10/13/justice-department-says-north-koreans-have-infiltrated-dozens-of-u-s-companies/)  
Published by Noti Group: https://noti.group/us-department-of-justice-warns-of-north-korean-hackers-targeting/
